A data room exists for one reason: to let you share documents that must not leak. Here is exactly how we protect them.
All traffic is served exclusively over HTTPS (TLS 1.2+). Unencrypted connections are refused.
Documents and databases are stored on encrypted volumes in our EU data centre.
Passwords are hashed with bcrypt. We never store, see or transmit plain-text passwords.
Uploaded files are stored under randomised names, outside the web root, and are only ever served through authenticated, permission-checked requests. There are no public links — by design.
Administrators manage; clients can only view and download what they have explicitly been granted.
Access is granted per data room, per user — and can be revoked instantly at any time.
Disabling an account locks the user out instantly, even if they have an active session.
Sign-in attempts are rate-limited to block password-guessing attacks.
Every sign-in, room view, upload and download is recorded with user and timestamp — a complete record for closing.
Signed, HttpOnly, SameSite cookies with automatic expiry. Every form is protected against cross-site request forgery.
Strict Content-Security-Policy, clickjacking protection and MIME-sniffing protection on every response.
All data is stored and processed on servers located in [EU COUNTRY], operated by [HOSTING PROVIDER]. Nothing leaves the EU/EEA.
The platform is fully self-contained: no third-party processors touch your documents.
Encrypted backups are taken [FREQUENCY] and retained for [PERIOD], so your deal never depends on a single disk.